ddos.watch - robtex.com

ddos.watch

DNSSEC⚠️ Not signed
A2606:4700:3033::ac43:c233πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3035::6815:4c79πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3035::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.76.121Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.194.51πŸ‡ΊπŸ‡Έ Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NShank.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3b74πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhank.ns.cloudflare.com
A2803:f800:50::6ca2:c174πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRhank.ns.cloudflare.com
A2a06:98c1:50::ac40:2174πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRhank.ns.cloudflare.com
A108.162.193.116πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhank.ns.cloudflare.com
A172.64.33.116πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhank.ns.cloudflare.com
A173.245.59.116πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhank.ns.cloudflare.com
NSjean.ns.cloudflare.com
A2606:4700:50::adf5:3a79πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjean.ns.cloudflare.com
A2803:f800:50::6ca2:c079πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRjean.ns.cloudflare.com
A2a06:98c1:50::ac40:2079πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRjean.ns.cloudflare.com
A108.162.192.121πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjean.ns.cloudflare.com
A172.64.32.121πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjean.ns.cloudflare.com
A173.245.58.121πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRjean.ns.cloudflare.com
TXTv=spf1 include:mailgun.org ~all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4104.21.76.121, 172.67.194.51
IPv62606:4700:3033::ac43:c233, 2606:4700:3035::6815:4c79
SOAhank.ns.cloudflare.comdns@cloudflare.com serial=2397095258

watch

DNSSECπŸ”’ Signed (DS record present)
NSv0n0.nic.watch ⭐
NSv0n1.nic.watch
NSv0n2.nic.watch
NSv0n3.nic.watch
NSv2n0.nic.watch
NSv2n1.nic.watch
SOAv0n0.nic.watchhostmaster@donuts.email serial=1773069472

Subdomains

Same first word

Similar names

DNS History

10 records (6 active, 4 former)

2017201820192020202120222023202420252026NShank.ns.cloudflare.comjean.ns.cloudflare.comA104.21.76.121172.67.194.512606:4700:3033::ac43:c2332606:4700:3035::6815:4c79104.27.154.129104.27.155.1292400:cb00:2048:1::681b:9a812400:cb00:2048:1::681b:9b81
●NShank.ns.cloudflare.com2016-12-10 β†’ 2026-03-09 Β· 2 obs
● 2016-12-10 23:45:36
● 2026-03-09 17:09:36
●NSjean.ns.cloudflare.com2016-12-10 β†’ 2026-03-09 Β· 2 obs
● 2016-12-10 23:45:36
● 2026-03-09 17:09:36
●A104.21.76.1212026-03-09 β†’ 2026-03-09 Β· 3 obs
β—‹ 2017-05-31 11:23:38
● 2026-03-09 08:04:26
● 2026-03-09 17:09:36
β—‹A104.27.154.1292016-12-10 β†’ 2017-05-31 Β· 4 obs
● 2016-12-10 23:45:36
● 2017-05-31 11:23:38
β—‹ 2026-03-09 08:04:26
β—‹ 2026-03-09 17:09:36
β—‹A104.27.155.1292016-12-10 β†’ 2017-05-31 Β· 4 obs
● 2016-12-10 23:45:36
● 2017-05-31 11:23:38
β—‹ 2026-03-09 08:04:26
β—‹ 2026-03-09 17:09:36
●A172.67.194.512026-03-09 β†’ 2026-03-09 Β· 3 obs
β—‹ 2017-05-31 11:23:38
● 2026-03-09 08:04:26
● 2026-03-09 17:09:36
β—‹A2400:cb00:2048:1::681b:9a812016-12-10 β†’ 2017-05-31 Β· 4 obs
● 2016-12-10 23:45:36
● 2017-05-31 11:23:38
β—‹ 2026-03-09 08:04:26
β—‹ 2026-03-09 17:09:36
β—‹A2400:cb00:2048:1::681b:9b812016-12-10 β†’ 2017-05-31 Β· 4 obs
● 2016-12-10 23:45:36
● 2017-05-31 11:23:38
β—‹ 2026-03-09 08:04:26
β—‹ 2026-03-09 17:09:36
●A2606:4700:3033::ac43:c2332026-03-09 β†’ 2026-03-09 Β· 3 obs
β—‹ 2017-05-31 11:23:38
● 2026-03-09 08:04:26
● 2026-03-09 17:09:36
●A2606:4700:3035::6815:4c792026-03-09 β†’ 2026-03-09 Β· 3 obs
β—‹ 2017-05-31 11:23:38
● 2026-03-09 08:04:26
● 2026-03-09 17:09:36

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
watchv0n0.nic.watch, v0n1.nic.watch, v0n2.nic.watch, v0n3.nic.watch...12 records
ddos.watchhank.ns.cloudflare.com, jean.ns.cloudflare.com-

βœ… Authoritative Response

Server: 172.64.33.116

NS records: hank.ns.cloudflare.com, jean.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for ddos.watch (unsigned zone)

⏱️ Timing

Total: 758ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.194.51, 104.21.76.121
AAAA22606:4700:3033::ac43:c233, 2606:4700:3035::6815:4c79
NS2hank.ns.cloudflare.com, jean.ns.cloudflare.com
TXT1v=spf1 include:mailgun.org ~all
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1hank.ns.cloudflare.com dns.cloudflare.co

πŸ“Œ Glue Records Collected

Total: 12

In-bailiwick: 12 (v2n1.nic.watch, v2n0.nic.watch, v0n3.nic.watch...)

Analysis

Hierarchy

dev.ddos.watch is a child of ddos.watch.

IP Addresses

ddos.watch refers to four IP numbers: 2606:4700:3033::ac43:c233, 2606:4700:3035::6815:4c79, 104.21.76.121 and 172.67.194.51.

Other host names, for instance domoexpress.com.br, blankcommunity.com, aandsconstruction.com.au, bouncemedia.org and xxb44.com share IP numbers with ddos.watch.

Name Servers

ddos.watch's delegation uses two name servers: hank.ns.cloudflare.com and jean.ns.cloudflare.com.

ddos.watch uses the same name server setup as other domains, such as themakery.cc, profitwell-events.com, appletondowntown.org, brettbelau.com and highladder.in.

ddos.watch at least partially shares name servers with other domains, including jaxl.com, kaeruyo.io, chihuahua.fr, numcaps.net and vepnet.com.

These name servers are commonly used together with the name servers dolly.ns.cloudflare.com, shubhi.ns.cloudflare.com, lisa.ns.cloudflare.com and elly.ns.cloudflare.com.

Host names with six IP numbers:

hank.ns.cloudflare.com points to 2606:4700:58::adf5:3b74, 2803:f800:50::6ca2:c174, 2a06:98c1:50::ac40:2174, 108.162.193.116, 172.64.33.116 and 173.245.59.116.

jean.ns.cloudflare.com points to 2606:4700:50::adf5:3a79, 2803:f800:50::6ca2:c079, 2a06:98c1:50::ac40:2079, 108.162.192.121, 172.64.32.121 and 173.245.58.121.